
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json)
Hash identifier: Kpj3IUH9WLj4sSiKB18vYzMOSJOquHL7+3g8AxcPNQc=
Subject key identifier: 5D:28:50:2D:4B:8B:11:CC:B0:CF:C4:53:80:57:F2:C2:D8:66:2C:BC
Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
Manifest number: 0209
Signing time: Wed 29 Jul 2026 04:16:58 +0000
Manifest this update: Wed 29 Jul 2026 04:16:58 +0000
Manifest next update: Wed 05 Aug 2026 04:16:58 +0000
Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: qiDkUbhTsC/6yVdoV3JuzUWMN6xXgElX16+WNqr+Qo0=)
2: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: 4fKiOKauzOW+Tltjqnic8gI8N5qp2KLhMHqhuZ8QyQU=)
3: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: Wwr1Eqq/L0YHNdQH3zpO8YtN+8gSRENMy82vCTfRXz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Validity
Not Before: Jul 29 04:16:58 2026 GMT
Not After : Aug 5 04:16:58 2026 GMT
Subject: CN=6a697eba-171d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:7c:22:e0:80:6b:0c:fc:33:b0:e0:b6:3b:
7d:65:73:80:f9:d9:a3:07:6c:70:c3:d3:f7:6e:2c:
ac:aa:7d:df:f2:44:68:4b:6a:b1:c5:c5:ee:5e:2e:
c2:6f:bb:27:ca:09:9e:95:6e:60:60:a9:ce:ec:52:
2c:03:2b:94:31:60:e7:cb:f1:1a:94:e7:3e:35:6f:
53:1b:ea:1e:f3:ef:28:95:91:12:5b:bd:c5:ff:95:
0e:0d:b3:af:0d:bd:fb:99:f2:7d:d9:87:f6:5d:2e:
b9:bf:71:87:d4:64:f0:83:06:88:0f:fa:1d:6f:49:
99:53:e5:2e:83:3e:32:cb:0a:0e:35:90:a3:a2:90:
a8:c1:dc:a4:1b:d6:f7:cb:dd:2d:bc:e9:92:75:4d:
56:38:37:30:7c:4a:0a:ba:c1:4f:70:4a:a6:35:1c:
fd:df:66:23:f9:79:f8:96:36:3f:ee:f3:78:73:c4:
17:d7:29:ad:83:5d:88:ee:2d:72:5a:3d:32:ea:7a:
dd:31:83:bd:fc:e6:a9:0b:e1:1d:b0:36:69:88:d8:
e3:8c:b2:3e:8c:a9:21:4b:65:1f:18:86:4e:75:82:
ab:e4:f6:62:1c:c8:60:ae:8e:ba:4a:0f:db:56:d3:
43:4e:f0:82:6f:1e:19:0d:c6:ab:b3:7f:c9:6e:52:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:28:50:2D:4B:8B:11:CC:B0:CF:C4:53:80:57:F2:C2:D8:66:2C:BC
X509v3 Authority Key Identifier:
keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:c3:d6:8e:dc:a1:61:34:8c:ad:24:38:aa:d8:a3:f8:54:19:
2a:50:92:6b:db:03:74:31:c8:27:78:1a:34:97:86:d2:a3:31:
7f:62:fc:4c:0e:ce:c0:a0:2d:71:00:a8:fa:82:79:94:7d:63:
51:26:e2:d9:f4:2b:98:8e:a9:30:f5:c8:ae:56:9c:20:4f:7d:
a9:58:b1:c3:e0:93:94:85:e2:b6:c7:75:cb:fc:69:07:e0:d0:
22:9e:c1:89:8b:13:aa:66:f5:a5:8d:97:5d:35:fe:7e:ac:d6:
c3:d0:7e:a8:09:fe:b4:8b:0f:9a:74:ae:99:e5:f3:bd:89:95:
52:5a:42:85:0f:4f:21:4e:11:a2:fd:27:e4:e9:2e:8d:3a:0d:
69:80:48:20:3e:90:68:ce:46:37:86:47:48:8d:2f:50:d4:7f:
e8:85:8b:8b:40:f2:12:ea:7b:57:fe:8d:cd:89:d7:2f:90:0d:
e0:fb:62:bd:9f:4a:b1:c1:62:d8:58:f2:0c:42:03:69:fe:0d:
e3:10:8a:b6:14:03:ef:86:5d:c4:b5:4e:4e:45:d9:41:21:77:
5a:20:93:ff:fa:dd:dc:2b:ac:a8:2e:2e:29:dc:76:7a:17:6f:
18:06:34:4b:16:5f:3e:eb:c1:39:9c:9c:e0:a5:b4:5e:6d:a4:
c2:f1:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:14 2026 by rpki-client